Re: [j-nsp] Juniper SRX MNHA
Aaron Gould via juniper-nsp <[email protected]> Mon, 4 Aug 2025 16:37:49 -0500
| Newsgroups | gmane.network.nsp.juniper |
|---|---|
| Message-ID | <[email protected]> |
--===============4066999210357828075== Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit I found the issue. Seems it was related to the default nat state, using interface ip nat overload (pat). I'm guessing since the interface ip is used for the translations, it didn't match the interface ip on the backup srx. once I changed from the default nat state, to use a pool, it worked! srx01... Session ID: 765924, Policy name: default-permit/5, HA State: Active, Timeout: 1800, Session State: Valid In: 192.168.11.5/29276 --> 246.246.246.98/22;tcp, Conn Tag: 0x0, If: ae2.0, Pkts: 21, Bytes: 1640, HA Wing State: Active, Out: 246.246.246.98/22 --> 123.123.123.255/1029;tcp, Conn Tag: 0x0, If: ae1.0, Pkts: 18, Bytes: 2712, HA Wing State: Active, Total sessions: 1 ------------------------------------------------------------------------------------------------------------------------------------------------------- srx02... (see session is now present and marked Warm.) Session ID: 658403, Policy name: default-permit/5, HA State: Warm, Timeout: 14404, Session State: Valid In: 192.168.11.5/29276 --> 246.246.246.98/22;tcp, Conn Tag: 0x0, If: ae2.0, Pkts: 0, Bytes: 0, HA Wing State: Warm, Out: 246.246.246.98/22 --> 123.123.123.255/1029;tcp, Conn Tag: 0x0, If: ae1.0, Pkts: 0, Bytes: 0, HA Wing State: Warm, Total sessions: 1 -Aaron --===============4066999210357828075== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KanVuaXBlci1u c3AgbWFpbGluZyBsaXN0IGp1bmlwZXItbnNwQHB1Y2submV0aGVyLm5ldApodHRwczovL3B1Y2su bmV0aGVyLm5ldC9tYWlsbWFuL2xpc3RpbmZvL2p1bmlwZXItbnNwCg== --===============4066999210357828075==--